TorIPTV

Information you provide

When you add a playlist to TorIPTV, you may enter:

• An M3U/M3U8 playlist URL or a local playlist file, or
• Xtream Codes login details (server address, username, password)

This information is stored locally on your device only, in the app's private storage. It is sent only to the IPTV provider's server you specify, in order to fetch your channel and content listings and to play video streams. TorIPTV does not transmit this information to us, and we have no access to it. The only exception is casting, described under "Third-Party Services" below, which happens only when you choose to cast.

TorIPTV does not host, provide, sell, or endorse any IPTV playlists, channels, or content. You are solely responsible for the legality and source of any playlist or account you add to the App.

Information stored on your device

The App stores the following locally, on your device only:

• Playlist connection details (URL, file or server/username/password), and playlist files you save from the App's category editor
• Channel, category, programme guide (EPG), movie, and series listings fetched from your playlist provider
• Favourites, locked/hidden items, watch history, and playback resume positions
• A parental-control PIN (if you set one) and related settings
• App preferences (theme, playback, discovery and timer settings, etc.)
• Your purchase or subscription status, as reported by Google Play
• Downloaded video files, if you choose to download content for offline playback
• Thumbnail images captured from your own playback sessions, used to show recently-watched channels
• The list of local folders and files you choose to play, and their resume positions

Recordings

If you use the recording feature, recorded video is saved to the folder you choose on your device or storage. Temporary timeshift buffer files are kept in the App's private storage and deleted when no longer needed.

Android TV home screen

On Android TV, the App can add channels and recommendations (titles, images and links to content in your playlist) to the Android TV home screen through the system's TV provider on your device. Locked and hidden items are never added. This information stays on your device.

None of this data is uploaded to us. App data, including your playlists, is excluded from Android's automatic device backup, so it stays only on the device it was created on.

Purchases and subscriptions

TorIPTV is offered with a free trial, subscriptions and a one-time purchase, all sold through Google Play. Google processes your payment and holds your payment details; we never see your card or bank details. Google Play tells the App whether you have an active trial, subscription or purchase, and the App stores that status on your device so it can unlock the App, including briefly without an internet connection.

We may receive reports from Google Play about sales (for example, order numbers, product, country and price) as part of operating our developer account, as every Google Play developer does. We use these only to run our business, handle refund or support requests you send us, and meet our tax and accounting obligations. See Google's privacy policy for how Google handles payment information.

Third-party services

Google Play

Purchases, subscriptions, free trials and refunds are processed by Google Play under Google's own terms and privacy policy.

The Movie Database (TMDB)

If enabled (on by default, can be turned off in Settings), the App contacts the TMDB API to fetch trending movie/series information, posters, and details for discovery purposes. These requests include the specific title or ID being looked up and, for trending lists, the country and language you selected in Settings. No playlist credentials or viewing history are sent to TMDB. See TMDB's own privacy policy for how they handle these requests. TorIPTV uses the TMDB API but is not endorsed or certified by TMDB.

Your IPTV Provider

Streaming video requires the App to connect directly to the server of the IPTV playlist or Xtream account you added. That connection is between your device and your provider; we have no visibility into it, and your provider's own privacy practices apply to that connection.

Google Cast (Chromecast)

If you choose to cast, the App sends the address of the stream you are watching, together with its title and image, to the cast device you select, which then plays it using Google's Cast service. For Xtream accounts, the stream address contains your account username and password, as is normal for that service. Casting happens only when you start it. See Google's privacy policy.

Voice search (Android TV)

If you use voice search, your speech is handled by your device's speech recognition service (usually provided by Google), which returns the recognised text to the App. The App does not record or keep audio.

Phone pairing (Android TV)

When you open the pairing screen on your TV, the App starts a temporary web page on your local network, protected by a PIN shown on the TV, so you can type a playlist on your phone. What you enter goes directly from your phone to your TV over your own network; it does not pass through any server of ours. The page stops when you close the pairing screen.

IP address

Any network request the App makes, to TMDB, Google Play, Google Cast or your IPTV provider, necessarily discloses your device's IP address to the server receiving that request. This is received directly by that service, not by us: we do not operate any server that the App communicates with, and we never see it.

Legal basis for processing (UK GDPR)

The App has no backend server of ours and stores your data only on your own device, so Tinkertap LTD does not process your personal data as a controller in the ordinary sense. Where we do process personal data:

• Purchase records received from Google Play are processed to perform our contract with you (UK GDPR Article 6(1)(b)) and to meet legal obligations such as tax and accounting (Article 6(1)(c)).
• Discovery requests to TMDB are made on the basis of legitimate interests (Article 6(1)(f)), to provide the discovery feature you have chosen to keep enabled, using the minimum data necessary.
• Support emails you send us are processed on the basis of legitimate interests, to answer you.

International data transfers

TMDB and Google are based in, or process data in, the United States and other countries. When the App contacts these services, your IP address and the request data described above are transferred outside the UK. These providers are responsible for appropriate safeguards under their own privacy policies.

Data retention

Data on your device is kept until you delete it in the App or uninstall the App. Purchase records we receive from Google Play are kept for as long as required for tax and accounting purposes (normally six years in the UK). Support emails are kept only as long as needed to resolve your request.

Your rights under UK GDPR

Under UK GDPR you have the right to:

• Be informed about how your data is used (this policy)
• Access any personal data held about you
• Have inaccurate data corrected
• Have your data erased
• Restrict or object to processing
• Data portability

Since app data lives only on your own device, you can exercise most of these rights directly: view, change, or delete anything the App stores by using the App's own controls, or by uninstalling it. For purchase records or support emails we hold, contact us at support@tinkertap.co.uk.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

What we do not do

• We do not require account registration or sign-in with us
• We do not collect analytics, crash reports, or usage telemetry
• We do not display advertising
• We do not sell your data
• We do not have access to your playlist credentials, viewing history, recordings or downloaded content
• We never see your payment card or bank details

Permissions

The App may request the following device permissions, used only for the stated purpose:

• Internet and network state — fetch playlists, guide data and posters, stream video, cast, and check purchases
• Notifications — show download progress
• Foreground service and wake lock — keep downloads and playback running
• Run at startup (receive boot completed) — resume paused downloads after a restart, and refresh Android TV home screen channels
• Android TV programme data (read/write EPG data) — add channels and recommendations to the Android TV home screen

Folders and files you choose (for local videos, playlist files or recordings) are accessed through the Android file picker, only for the items you select.

Children's privacy

TorIPTV is not directed at children and does not knowingly collect information from children.

Data deletion

You can delete app data at any time by removing playlists, recordings, downloads and history within the App, or by uninstalling the App, which removes all of its local data. Cancelling a subscription is done in Google Play and does not delete data on your device. To ask us to delete purchase or support records we hold, where we are not legally required to keep them, email support@tinkertap.co.uk.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted at this same location with an updated "Last updated" date.

Contact